Online Access Free P-ADMSEC-731 Practice Test

A customer uses an LDAP (Lightweight Directory Access Protocol ) enabled directory server. To simplify
the administration of SAP users, Central User Administration (CUA) was introduced. Now there are plans
to synchronize the LDAP enabled directory server with the CUA. Which of the following statements are
true? Note: There are 2 correct answers to this question.

• A.A prerequisite for the communication between the CUA and the LDAP enabled directory server is to
  open the LDAP(s) port in the firewall environment, if a firewall is used.
• B.The communication between LDAP and the CUA is based on PI 7.1. Therefore, SAP specific PI
  adapter ports must be open in the firewall environment.
• C.The synchronization of fields can be controlled via a mapping transaction in SAP ABAP.
• D.The SAP user field: BNAME is already a standard for most of the LDAP enabled directory server.
  Therefore the field mappings can be easily customized.
• E.A SAPROUTER must be used to establish the proper connection between the SAP CUA and the LDAP
  provider.

Which of the following statements about SAP Logon Tickets are true? Note: There are 2 correct answers
to this question.

• A.The ticket issuing system does not need a PSE (Personal Security Environment).
• B.With the aid of web server filters, non-SAP components do not have to verify SAP Logon Tickets.
• C.An Access Control List (ACL) is used to ensure that the tickets are only accepted from explicit
  ticket-issuing servers.
• D.Set the parameter: login/create_sso2_ticket = 2 if the application public key for the server has been
  signed by a CA.

Which of the following statements about security of RFC connections are true? Note: There are 2 correct
answers to this question.

• A.The trusted relationship authorization object: S_RFCACL is part of the profile: SAP_ALL.
• B.No passwords are transmitted through the network within trusted relationships.
• C.In SAP NetWeaver AS 7.0 you should secure RFC connections using the secinfo and the reginfo file.
• D.You can define which authorizations are required in the RFC destination for the corresponding RFC
  connection with the field "Authorizations in Destinations" (SM59).

Which of the following statements regarding authorization maintenance using transaction: PFCG are true?
Note: There are 2 correct answers to this question.

• A.For authorizations with the status: "changed", the Profile Generator cannot create a connection
  between the object entry and the menu.
• B.SAP recommends assigning organizational level values directly in the authorization structure.
• C.The status: "Old" for authorizations indicates that all field values in the subordinate levels of the
  hierarchy are still current and that no new authorizations have been added.
• D.SAP recommends merging authorizations in the background.

Which of the following statements about the role maintenance tool (PFCG) are true? Note: There are 3
correct answers to this question.

• A.You can only administer Organizational Management and workflows in the "Complete view".
• B.To eliminate double menu entries in the menu of composite roles, you have to use the "Collapse Menu"
  button.
• C.The tool can automatically suggest transaction codes for customizing projects.
• D.The tool allows mass maintenance of Price List Categories.
• E.If you insert a report in the menu you cannot assign a transaction code for this report manually.